Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AEAyxYsrZfVxDl_t_papZ9hoy98.roa
File: AEAyxYsrZfVxDl_t_papZ9hoy98.roa (raw, json)
Hash identifier: l2FIAvy+BpITAU+qOlpJKk999kWdEa7TsVVkogCuBqg=
Subject key identifier: 00:40:32:C5:8B:2B:65:F5:71:0E:5F:ED:FE:96:A9:67:D8:68:CB:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8DFE9691
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AEAyxYsrZfVxDl_t_papZ9hoy98.roa
Signing time: Sun 19 Jun 2022 04:08:44 +0000
ROA not before: Sun 19 Jun 2022 04:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382272145 (0x8dfe9691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 04:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=004032c58b2b65f5710e5fedfe96a967d868cbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:67:03:1a:9f:cb:d7:d3:bb:0f:bd:e9:36:
33:55:89:ff:d4:18:f9:3c:07:92:64:9d:ce:6a:b8:
11:0c:6d:74:9c:45:85:0a:29:62:27:f4:7a:71:6c:
32:c0:ab:0f:c1:60:2d:3b:ca:f9:e2:50:51:b7:50:
c7:a6:4d:41:25:f9:13:79:33:0e:e2:52:bc:38:1e:
56:8c:dd:e3:b2:d1:8e:df:ba:d5:41:f1:c5:b8:16:
e2:09:06:19:48:da:e5:00:4b:95:ad:78:b1:66:a7:
f9:43:e7:2d:a4:1b:cc:8b:09:5c:64:ec:7e:da:bf:
6f:7d:50:66:15:2f:15:b5:63:53:37:c1:ed:38:96:
f2:26:e8:7c:42:fc:fd:6c:ee:de:a3:9e:98:8c:53:
b3:11:5e:dc:00:66:a4:99:a3:1c:60:55:5b:82:1e:
0c:ce:19:c4:cb:3e:8d:7f:b7:f3:a6:57:be:5d:d0:
9d:06:fa:66:aa:ae:07:4b:08:b2:0a:05:82:53:3c:
8d:3c:38:3b:04:fe:17:82:df:ec:98:ed:c9:3f:1f:
a2:0b:ac:72:2d:76:e7:15:11:74:b3:83:2a:43:a2:
ad:9b:7f:98:7e:97:6e:27:4f:a2:4c:d1:a6:23:17:
4b:52:bb:0c:e3:bb:3e:24:0b:27:5b:7f:25:9b:73:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:32:C5:8B:2B:65:F5:71:0E:5F:ED:FE:96:A9:67:D8:68:CB:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AEAyxYsrZfVxDl_t_papZ9hoy98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:c5:18:6c:be:9f:a0:c9:f8:ee:41:62:26:5f:56:8b:e2:63:
0f:94:c5:4e:e7:b7:0f:7e:10:18:a4:27:20:c1:1f:3f:fd:8b:
0b:f8:51:c5:11:1c:40:89:a6:bd:a5:8c:24:4f:5d:f6:40:20:
27:c4:ac:14:fc:b8:0c:29:7c:c1:46:2d:ed:f2:9f:97:eb:8f:
e3:96:4a:df:9e:03:ac:9c:33:5b:39:2f:67:0f:e8:01:63:24:
ec:ed:d9:aa:74:a4:60:92:ba:96:ad:16:55:62:04:8d:60:e2:
62:b6:25:cb:f4:e5:e4:10:c1:3b:4c:d2:51:bc:27:14:34:8c:
e1:0e:5d:64:a8:eb:d6:8a:b5:74:e4:68:aa:d7:15:86:f6:37:
54:6d:15:d5:29:11:4a:8e:e1:c5:23:a4:31:19:c5:5f:f8:fc:
f4:64:7e:0f:80:0b:a0:29:95:cc:3c:e0:5e:2d:77:1f:c4:2a:
3e:ff:92:53:33:62:f3:72:49:1b:f0:9e:4f:0a:ca:7c:73:75:
77:2d:bf:2e:d3:ba:62:4d:84:8c:2f:b4:e3:46:7c:c6:34:08:
71:2b:42:e3:46:ad:61:5c:4c:18:09:62:5c:f8:dc:5a:3c:f2:
d2:fa:3a:30:c8:47:de:d1:d4:4c:6a:70:d8:f2:61:1c:19:a1:
66:df:5c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:34:17 2025 by rpki-client